connector.php in the fckeditor2rc2 addon in DoceboLMS 2.0.4 allows remote malicious users to execute arbitrary PHP by using the FileUpload command to upload a file that appears to be an image but contains PHP script.
Vulnerable Product | Search on Vulmon | Subscribe to Product |
---|---|---|
docebolms docebolms 2.0.4 |